jeremy2300
Technical User
<be kind I'm New to Imail>
OK here is the situation. I'm filtering messages for files of type *.scr and *.pif....(Viruses usually): this part is working, but I would like to sort the outgoing infected mail into a sub mailbox under the account i'm using to hold the messages. The reason for this is so as to allow myself to contact any clients with infected computers. Due to the order of the processing rules the closest i've come to success is to use something similar to this:
Domain Level
Incomming Rules
Body Contains filename=.*\.scr
OR
Body Contains filename=.*\.pif
AND
From Does Not Contain domain1.com
:forward to vBox@domain1.com
Outgoing Rules
Body Contains filename=.*\.scr
OR
Body Contains filename=.*\.pif
:forward to vBox-outgoing@domain1.com
It seems that the incomming rules will be processed before the outgoing rules regardless of wether the message is comming from domain1 or going to domain1.
So the logic here is for all infected messages that are not clients to go to vBox@domain1.com
When this rule fails for domain1.com clients the Outgoing rules get used so, by default outgoing rules will process only infected messages from domain1.com and re-direct them to vBox-outgoing@domain1.com.
The problem is that if messages are sent from a domain1.com client to a domain1.com client the rules are skipped (or fail) and the virus gets sent out.
Q:Why is this happining?
Q:How do I solve it?
Q:If the inbound rules are really processed first no matter what, why have outbound rules at all? (I figure I must be wrong on this)
>>currently i'm just dumping everything into one mailbox.
Thanks for any info you can give.
OK here is the situation. I'm filtering messages for files of type *.scr and *.pif....(Viruses usually): this part is working, but I would like to sort the outgoing infected mail into a sub mailbox under the account i'm using to hold the messages. The reason for this is so as to allow myself to contact any clients with infected computers. Due to the order of the processing rules the closest i've come to success is to use something similar to this:
Domain Level
Incomming Rules
Body Contains filename=.*\.scr
OR
Body Contains filename=.*\.pif
AND
From Does Not Contain domain1.com
:forward to vBox@domain1.com
Outgoing Rules
Body Contains filename=.*\.scr
OR
Body Contains filename=.*\.pif
:forward to vBox-outgoing@domain1.com
It seems that the incomming rules will be processed before the outgoing rules regardless of wether the message is comming from domain1 or going to domain1.
So the logic here is for all infected messages that are not clients to go to vBox@domain1.com
When this rule fails for domain1.com clients the Outgoing rules get used so, by default outgoing rules will process only infected messages from domain1.com and re-direct them to vBox-outgoing@domain1.com.
The problem is that if messages are sent from a domain1.com client to a domain1.com client the rules are skipped (or fail) and the virus gets sent out.
Q:Why is this happining?
Q:How do I solve it?
Q:If the inbound rules are really processed first no matter what, why have outbound rules at all? (I figure I must be wrong on this)
>>currently i'm just dumping everything into one mailbox.
Thanks for any info you can give.